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Claim Amendments 

This listing of the claims will replace all prior versions, 
and listings, of claims in the application: 

Claim 1 (currently amended) : A security module for use with a 
terminal, comprising 

a data interface adapted to be coupled to a terminal, for 
receiving at loaat one of part of an algorithm code or and 
the complete algorithm code from the terminal, with the 
algorithm code concerning a processing of secrets [[,]] 

an energy a power interface for receiving supply e nergy ROwer 
from the terminal; 

a volatile memory for storing the one of the part of . the 
algorithm code ea? and the complete algorithm code received via 
the data interface, said volatile memory being coupled to the 
oncrgy power interface in order to have eRe^gy power supplied 
thereto such that the oamo said volatile memory will be 
cleared upon an interruption of the receipt of the supply 
energy power from the terminal; and 
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* ^„^r,« fche algorithm code in order to 
a processor for performing the aigor 

n- i->»af can be delivered to tHe 
obtain an algorithm code result that can be 

terminal . 

^^^s A security module according to 
Claim 2 (currently amended) . A secur y 

• rf.ta •i^^or.fade i3 adaptod fn receive onlx 
claim 1, wherein the data i nterrage . - 

^ hh^. "security module further 
the^eart^ot_th^alao^ 

coTPprising: 

.ne al.c.it.. ooae is stored a-a-iL^S^^^^^Si:^ 

OXa« . <o.i9in.X) = . security «auie according to clai» X. 
further comprising: 

.„.v,«,«i-ication between the terminal 
a means for performing an authentication 

and the security module. 

Cl,i. . (-rentxy >^r^> • - module according to 

^ olai,» """^^^ " 

«=eive fro. t.e ter.i«aX tHs..5n^--. P'- 

..,orit.» code « — - — """^ ^" '"'^ 

and with a =erti£icate, with the security nodule 
form € « id/og anaj^itn 

further comprising: 
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• r^ode and the encrypted complete 
encrypted algorithm code a__ 

algorithm code; and 

performing of ttie axgo^. 
of said certificate iael«-S«»«»e«. 

J ^> » »ecuriCY module according to 
Claim 5 (currently amended) : A 

«^ Claim 1. ,£,^£.1..^.^-^.^^^=^^^^-^-^^ 

module further comprising: 

•na unit for controlling memory accesses of the 
a memory managing unit: lor 

part of the algorithm code 
processor, with the ta.a*.s*e^ par 

=^ri*-eaees of the algorithm code, 
containing addresses ot 

. A security module according to 
Claim 6 (currently amended) . 

claim 1. further comprising: 

. . a predetermined security condition and 
a means for monitoring a predete 

. « the volatile memory if said predetermined 
for clearing tn© voi-^^-^j- ^ --t^n" 

• ... fulfilled, with said security condition 

security condition is ful£iAJ.e«' 

. « Plurality of conditions comprising an 
being selected from a plurality 
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.„«^..ion. an i«e^-ri.y -na a fluo.u.t.o„ of «e 
operating parameters. 

^ A security module according to 

Claim 7 (currently amended) : A secur y 

. .he algorithm code comprise, a program 
n nv of Claim 1. wherein the algoricn 

^.ela=«a fo. c«^-. out a cas. s.X.«ea f.o™ a ..oup 

. of a sy»««i= c^.o..aphic al.o...h™. 

eeff^*i^i«9 corisistxna_o£ a syn. 

^ .^ymmetric cryptographic algorithm, an .S. algorithm, 
.^ptographic process according to the .E. standard, 

«r.d an access function for accessing a 
elliptic curve process and an acce 

aigit^lvaxu^^-^.^^ , 

^^^^^^^^^ ^ rran^the digital value stored on 

access function for changing [tall the_di3 

the security module. 

. ^> 1 security inodule according to 
Claim 8 (currently amended) : A e-uri 

^ claim 1, "herein eaid«taaaterfa«^i^a^^ 

, Of tfi^alaorithmcode. *e part .eee^ 
^^^^i. r^ only the_^ art_o|Jthg_axg- 

- ^''^ ■ ^ ^. .^morising a start address of 

of the algorithm code ee«p.^ comerisina 

. addresses of computing components 
the algorithm code, memory addresses ™p ,.^^3,3 

_.sary for performing the algorithm code, or 3ump address 

of the algorithm code. 

.currently amended, : . security — " 

^ Claim 1. Wherein ...d,..^.^^--^^^ 
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receive the one of the part of the, algorithm code and the 
complete algorithm code several times in different versions, 
with the volatile memory -to being arranged for storing a newly 
rsceived-T — Qltorcd par b version of one of the part of the of 
the algorithm code and the complete algorithm code ever- such 
that the atorcd previously received version of one of the part 
of the algorithm codo or the otorcd and the complete algorithm 
code is overwritten * 

Claim 10 (currently amended) : A security module according to 
any of claim 1, wherein ©aid security module is designed as a 
chip card. 

Claim 11 (currently amended) j A process for computing an 
algorithm code result using a security module, comprising the 
steps of: 

receiving least one of part of an algorithm code ea? and the 
complete algorithm code by means of an energy interface to a 
terminal, with the algorithm code concerning a processing of 
secrets; 

volatile storing oaid storing the one of the part of the 
algorithm code or said and the complete algorithm code in a 
volatile memory of the security module, with the volatile 
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■1 J r- nr-rr r^ interface, to be supplied 

Tnetnory being coupled to the eae^gy inueriacc, 

with e«e^ £Ower. such that the ^ yglat xle memory , will be 
cleared upon an interruption of the receipt of the supply 
energy power from the terminal [ [ : 1 ] i. 

performing said algorithm code on the security module in order 
to obtain an algorithm code result; and 

delivering said algorithm code result to the terminalr-«»^ 

c l oai in r j nnid . (. latlla m cu.uL > upun intnT M . p L l u n □£ t hr^ 
a ? e oGipt u l bhc ourplj^ cnargy fj -ot u the t orminat. 

Claim 12 (currently amended) : A process according to claim 
XI, .h uxcL U U..I.1 .11 'I' "f n. tri ng comprioe^ f,,rther comprisinq 
removing the security module from the terminal thereb^^causina 
^nr,.rruotion ^^n.i pt of the supply power to the 

memory from the te rminal and clearing said volatile 
^.n.ow uoon ^ >.^>.v>.untion of fhe receipt of supply power from 
the terminal . 

Claim 13 (currently amended) : A terminal for use with a 
security module, comprising: 
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a data Interface adapted to be coupled to the security module, 
for transmitting at least part of an algorithm code or the 
complete algorithm code from the terminal to a volatile memory 
of the security module and for receiving ^fehe an algorithm 
code result from the security module, with the algorithm code 
concerning a processing of secrets; and 

an energy a power interface for delivering supply energy power 
to the security module, with the volatile memory being 
supplied by the supply energy power , such that the pame 
volatile memory; will be cleared upon an interruption of the 
receipt of the supply energy power from the terminal, 

with the terminal, for each communication operation between 
terminal and security module during one and the oamc 
oommunioation operation with the oeourity modulo , being 
designated adapted t o, during a single one of the 
communication operations with the security module, send at 
least the part of the algorithm coda or the complete algorithm 
code to the volatile memory of the security module; and, 

oubooquontly; — during the further eommunication prooooO r- after 
sending, receive the algorithm code result from the security 
module - 
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Claim 14 (currently amended) : A process for controlling 
within a plurality of communication operations, a security 
module using a terminal in order to obtain an algorithm code 
result from the security module, with the process comprising 
for each communication operation, performing the following 
steps. during ono and the oamo a single one of the 
communication operation operations with the security module: 

delivering supply energy power from the terminal to the 
security module; 

transmitting at least part of an algorithm code or the 
complete algorithm code from the terminal to a volatile memory 
of the security module, with the algorithm code concerning a 
processing of secrets, with the volatile memory being supplied 
by the supply energy power , such that the oam e volatile memory 
will be cleared upon an interruption of the receipt of the 
supply cnorg y power from the terminal; and 

receiving ^1=^ an algorithm code result from the security 
module • 

Claim 15 (currently amended) s A process for communication 
between a security module and a terminal, comprising the steps 

of: 
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transferring at loaat one of part of an algorithm code e^? and 
the complete algorithm code from the terminal to the security 
module, with the algorithm code concerning a processing of. 
secrets; 

volatile ofcoring paid storing the one of the part of the 
algorithm code and said complete algorithm code in a 
volatile memory o£ the security module, with the volatile 
memory being supplied by ^fehe supply efteapgy power , such that 
the samo volatile memory will be cleared upon interruption of 
the receipt of the supply energy power from the terminal; 

performing said algorithm code on the security module in order 
to obtain an algorithm code results- 
delivering said algorithm code result to the terminal; and 

clearing said volatile memory upon an interruption of the 
receipt of the supply onorgy power from the terminal. 

Claim 16 (currently amended) : A process according to claim 
15, further comprising: 
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,e^e^ seauentiallx transferring e# a plurality of different 
versions of ^ ^v,. one of the part of the algorithm code 
and said complete algorithm code; and 

.eouentially storing the .e^eatediy^^.pa.«*-e^e^^^e^^ the 
^.ff.^^nt versicna of the one of the part of the 

algorithm code and the complete algorithm code eve.^ 

.lyorithm cn^o gu^hnt n rPHp^orive previous ver^ion.oL^ 
p-.„..ii.,v of diffe r - - »f the one of fhe. part of the 

„-.^^...v,. .ode and th e complete algorithm code i^ over written. 

Claim 17 (new): A security module for use with a terminal, 
comprising: 

a data interface adapted to be coupled to a terminal, for 
receiving a first part of an algorithm code from the terminal, 
with the algorithm code concerning a cryptographic processing 
of data; 



a power 
terminal ; 



interface for receiving supply power from the 



a volatile memory for storing the first part of the algorithm 
code received via the data interface, said volatile memory 
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being coupled to said power interface in order to have power 
supplied thereto such that the volatile memory will be cleared 
upon an interruption of the receipt of the supply power from 
the terminal; 

a non-volatile memory in which a second part of the algorithm 
code which is a non- received remainder the algorithm code is 
stored; and 

a processor for performing the algorithm code in order to 
obtain cryptographically processed data that can be delivered 
to the terminal, wherein the first part of the algorithm code 
includes memory addresses of computing conponenta necessary 
for performing the algorithm code, or jump addresses of the 
algorithm code pointing to partial routines of the algorithm 
code . 
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